Description
Multiple buffer overflows in iCloud Keychain in Apple iOS before 8.2 and Apple OS X through 10.10.2 allow man-in-the-middle attackers to execute arbitrary code by modifying the client-server data stream during keychain recovery.
References
- APPLE-SA-2015-03-09-3 vendor-advisory
- 73007 vdb-entry
- https://support.apple.com/HT204413
- APPLE-SA-2015-03-09-1 vendor-advisory
- 1031864 vdb-entry
- https://support.apple.com/kb/HT204563
- https://support.apple.com/HT204423